Thursday, January 17, 2008

Yahoo joins OpenId

I really like the OpenId project. It is a framework which provides cross-domain SSO (single sign on). ie, if I have registered with 10 websites who all have implemented open id, then i can choose one among them to be my identity provider and authenticate on all the 10 web sites with this one single id. Yahoo has announced today that they would be providing a beta version of this identity provider service starting this 30th. There are already more than 10,000 sites using OpenId framework which means that if I opt Yahoo as my identity provider, I can login to the other 10,000 sites with my yahoo id/pwd. Google and MS have already shown interest in OpenId and are working on to implement this framework. The benefit I see with OpenId is, the less passwords I need to remember, more stronger,the passwords would be. For eg, since I have registered for services with 20 - 30 sites with 20-30 ids / pwds, I might forget one or the other and get bugged up, which would lead me to set passwords that are quite weak (and so easily crackable). As a coin always has 2 sides, there sure will be some security concerns and issues while using Open Id. For eg, there might be phishing attacks leading to a wider id theft. But still, I think OpenId is here to stay. Hoping to see more open id migrations..

No comments: